123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387 |
- ## Kamailio - equivalent of routing blocks in Python
- ##
- ## KSR - the new dynamic object exporting Kamailio functions
- ## Router - the old object exporting Kamailio functions
- ##
- ## Relevant remarks:
- ## * return code -255 is used to propagate the 'exit' behaviour to the
- ## parent route block function. The alternative is to use the native
- ## Python function os.exit() (or exit()) -- it throws an exception that
- ## is caught by Kamailio and previents the stop of the interpreter.
- import sys
- import Router.Logger as Logger
- import KSR as KSR
- # global variables corresponding to defined values (e.g., flags) in kamailio.cfg
- FLT_ACC=1
- FLT_ACCMISSED=2
- FLT_ACCFAILED=3
- FLT_NATS=5
- FLB_NATB=6
- FLB_NATSIPPING=7
- # global function to instantiate a kamailio class object
- # -- executed when kamailio app_python module is initialized
- def mod_init():
- KSR.info("===== from Python mod init\n");
- # dumpObj(KSR);
- return kamailio();
- # -- {start defining kamailio class}
- class kamailio:
- def __init__(self):
- KSR.info('===== kamailio.__init__\n');
- # executed when kamailio child processes are initialized
- def child_init(self, rank):
- KSR.info('===== kamailio.child_init(%d)\n' % rank);
- return 0;
- # SIP request routing
- # -- equivalent of request_route{}
- def ksr_request_route(self, msg):
- # KSR.info("===== request - from kamailio python script\n");
- # KSR.info("===== method [%s] r-uri [%s]\n" % (KSR.pv.get("$rm"),KSR.pv.get("$ru")));
- # per request initial checks
- if self.ksr_route_reqinit(msg)==-255 :
- return 1;
- # NAT detection
- if self.ksr_route_natdetect(msg)==-255 :
- return 1;
- # CANCEL processing
- if KSR.pv.get("$rm") == "CANCEL" :
- if KSR.tm.t_check_trans()>0 :
- self.ksr_route_relay();
- return 1;
- # handle requests within SIP dialogs
- self.ksr_route_withindlg(msg);
- # -- only initial requests (no To tag)
- # handle retransmissions
- if KSR.tmx.t_precheck_trans()>0 :
- KSR.tm.t_check_trans();
- return 1;
- if KSR.tm.t_check_trans()==0 :
- return 1;
- # authentication
- if self.ksr_route_auth(msg)==-255 :
- return 1
- # record routing for dialog forming requests (in case they are routed)
- # - remove preloaded route headers
- KSR.hdr.remove("Route");
- if "INVITE|SUBSCRIBE".find(KSR.pv.get("$rm"))!=-1 :
- KSR.rr.record_route();
- # account only INVITEs
- if KSR.pv.get("$rm")=="INVITE" :
- KSR.setflag(FLT_ACC); # do accounting
- # dispatch requests to foreign domains
- if self.ksr_route_sipout(msg)==-255 :
- return 1;
- # # requests for my local domains
- # handle registrations
- if self.ksr_route_registrar(msg)==-255 :
- return 1;
- if KSR.pv.is_null("$rU") :
- # request with no Username in RURI
- KSR.sl.sl_send_reply(484,"Address Incomplete");
- return 1;
- # user location service
- self.ksr_route_location(msg);
- return 1;
- # wrapper around tm relay function
- def ksr_route_relay(self, msg):
- # enable additional event routes for forwarded requests
- # - serial forking, RTP relaying handling, a.s.o.
- if "INVITE,BYE,SUBSCRIBE,UPDATE".find(KSR.pv.get("$rm"))!=-1 :
- if KSR.tm.t_is_set("branch_route")<0 :
- KSR.tm.t_on_branch("ksr_branch_manage");
- if "INVITE,SUBSCRIBE,UPDATE".find(KSR.pv.get("$rm"))!=-1 :
- if KSR.tm.t_is_set("onreply_route")<0 :
- KSR.tm.t_on_reply("ksr_onreply_manage");
- if KSR.pv.get("$rm")=="INVITE" :
- if KSR.tm.t_is_set("failure_route")<0 :
- KSR.tm.t_on_failure("MANAGE_FAILURE");
- if KSR.tm.t_relay()<0 :
- KSR.sl.sl_reply_error();
- return -255;
- # Per SIP request initial checks
- def ksr_route_reqinit(self, msg):
- if not KSR.is_myself(KSR.pv.get("$si")) :
- if not KSR.pv.is_null("$sht(ipban=>$si)") :
- # ip is already blocked
- KSR.dbg("request from blocked IP - " + KSR.pv.get("$rm")
- + " from " + KSR.pv.get("$fu") + " (IP:"
- + KSR.pv.get("$si") + ":" + KSR.pv.get("$sp") + ")\n");
- return -255;
- if KSR.pike.pike_check_req()<0 :
- KSR.err("ALERT: pike blocking " + KSR.pv.get("$rm")
- + " from " + KSR.pv.get("$fu") + " (IP:"
- + KSR.pv.get("$si") + ":" + KSR.pv.get("$sp") + ")\n");
- KSR.pv.seti("$sht(ipban=>$si)", 1);
- return -255;
- if not KSR.pv.is_null("$ua") :
- if (KSR.pv.get("$ua").find("friendly-scanner")!=-1
- or KSR.pv.get("$ua").find("sipcli")!=-1) :
- KSR.sl.sl_send_reply(200, "Processed");
- return -255;
- if KSR.maxfwd.process_maxfwd(10) < 0 :
- KSR.sl.sl_send_reply(483,"Too Many Hops");
- return -255;
- if (KSR.pv.get("$rm")=="OPTIONS"
- and KSR.is_myself(KSR.pv.get("$ru"))
- and KSR.pv.is_null("$rU")) :
- KSR.sl.sl_send_reply(200,"Keepalive");
- return -255;
- if KSR.sanity.sanity_check(1511, 7)<0 :
- KSR.err("Malformed SIP message from "
- + KSR.pv.get("$si") + ":" + KSR.pv.get("$sp") +"\n");
- return -255;
- # Handle requests within SIP dialogs
- def ksr_route_withindlg(self, msg):
- if KSR.siputils.has_totag()<0 :
- return 1;
- # sequential request withing a dialog should
- # take the path determined by record-routing
- if KSR.rr.loose_route()>0 :
- if self.ksr_route_dlguri(msg)==-255 :
- return -255;
- if KSR.pv.get("$rm")=="BYE" :
- # do accounting ...
- KSR.setflag(FLT_ACC);
- # ... even if the transaction fails
- KSR.setflag(FLT_ACCFAILED);
- elif KSR.pv.get("$rm")=="ACK" :
- # ACK is forwarded statelessy
- if self.ksr_route_natmanage(msg)==-255 :
- return -255;
- elif KSR.pv.get("$rm")=="NOTIFY" :
- # Add Record-Route for in-dialog NOTIFY as per RFC 6665.
- KSR.rr.record_route();
- self.ksr_route_relay(msg);
- return -255;
- if KSR.pv.get("$rm")=="ACK" :
- if KSR.tm.t_check_trans() >0 :
- # no loose-route, but stateful ACK;
- # must be an ACK after a 487
- # or e.g. 404 from upstream server
- self.ksr_route_relay(msg);
- return -255;
- else:
- # ACK without matching transaction ... ignore and discard
- return -255;
- KSR.sl.sl_send_reply(404, "Not here");
- return -255;
- # Handle SIP registrations
- def ksr_route_registrar(self, msg):
- if KSR.pv.get("$rm") != "REGISTER" :
- return 1;
- if KSR.isflagset(FLT_NATS) :
- KSR.setbflag(FLB_NATB);
- # do SIP NAT pinging
- KSR.setbflag(FLB_NATSIPPING);
- if KSR.registrar.save("location", 0)<0 :
- KSR.sl.sl_reply_error();
- return -255;
- # User location service
- def ksr_route_location(self, msg):
- rc = KSR.registrar.lookup("location");
- if rc<0 :
- KSR.tm.t_newtran();
- if rc==-1 or rc==-3 :
- KSR.sl.send_reply(404, "Not Found");
- return -255;
- elif rc==-2 :
- KSR.sl.send_reply(405, "Method Not Allowed");
- return -255;
- # when routing via usrloc, log the missed calls also
- if KSR.pv.get("$rm")=="INVITE" :
- KSR.setflag(FLT_ACCMISSED);
- self.ksr_route_relay(msg);
- return -255;
- # IP authorization and user uthentication
- def ksr_route_auth(self, msg):
- if KSR.pv.get("$rm") != "REGISTER" :
- if KSR.permissions.allow_source_address(1)>0 :
- # source IP allowed
- return 1;
- if KSR.pv.get("$rm")=="REGISTER" or KSR.is_myself(KSR.pv.get("$fu")) :
- # authenticate requests
- if KSR.auth_db.auth_check(KSR.pv.get("$fd"), "subscriber", 1)<0 :
- KSR.auth.auth_challenge(KSR.pv.get("$fd"), 0);
- return -255;
- # user authenticated - remove auth header
- if not "REGISTER,PUBLISH".find(KSR.pv.get("$rm"))!=-1 :
- KSR.auth.consume_credentials();
- # if caller is not local subscriber, then check if it calls
- # a local destination, otherwise deny, not an open relay here
- if (not KSR.is_myself(KSR.pv.get("$fu"))
- and (not KSR.is_myself(KSR.pv.get("$ru")))) :
- KSR.sl.sl_send_reply(403,"Not relaying");
- return -255;
- return 1;
- # Caller NAT detection
- def ksr_route_natdetect(self, msg):
- KSR.force_rport();
- if KSR.nathelper.nat_uac_test(19)>0 :
- if KSR.pv.get("$rm")=="REGISTER" :
- KSR.nathelper.fix_nated_register();
- elif KSR.siputils.is_first_hop()>0 :
- KSR.nathelper.set_contact_alias();
- KSR.setflag(FLT_NATS);
- return 1;
- # RTPProxy control
- def ksr_route_natmanage(self, msg):
- if KSR.siputils.is_request()>0 :
- if KSR.siputils.has_totag()>0 :
- if KSR.rr.check_route_param("nat=yes")>0 :
- KSR.setbflag(FLB_NATB);
- if (not (KSR.isflagset(FLT_NATS) or KSR.isbflagset(FLB_NATB))) :
- return 1;
- KSR.rtpproxy.rtpproxy_manage("co");
- if KSR.siputils.is_request()>0 :
- if not KSR.siputils.has_totag() :
- if KSR.tmx.t_is_branch_route()>0 :
- KSR.rr.add_rr_param(";nat=yes");
- if KSR.siputils.is_reply()>0 :
- if KSR.isbflagset(FLB_NATB) :
- KSR.nathelper.set_contact_alias();
- return 1;
- # URI update for dialog requests
- def ksr_route_dlguri(self, msg):
- if not KSR.isdsturiset() :
- KSR.nathelper.handle_ruri_alias();
- return 1;
- # Routing to foreign domains
- def ksr_route_sipout(self, msg):
- if KSR.is_myself(KSR.pv.get("$ru")) :
- return 1;
- KSR.hdr.append("P-Hint: outbound\r\n");
- self.ksr_route_relay(msg);
- return -255;
- # Manage outgoing branches
- # -- equivalent of branch_route[...]{}
- def ksr_branch_manage(self, msg):
- KSR.dbg("new branch ["+ str(KSR.pv.get("$T_branch_idx"))
- + " to "+ KSR.pv.get("$ru") + "\n");
- self.ksr_route_natmanage(msg);
- return 1;
- # Manage incoming replies
- # -- equivalent of onreply_route[...]{}
- def ksr_onreply_manage(self, msg):
- KSR.dbg("incoming reply\n");
- scode = KSR.pv.get("$rs");
- if scode>100 and scode<299 :
- self.ksr_route_natmanage(msg);
- return 1;
- # Manage failure routing cases
- # -- equivalent of failure_route[...]{}
- def ksr_failure_manage(self, msg):
- if self.ksr_route_natmanage()==-255 : return 1;
- if KSR.tm.t_is_canceled()>0 :
- return 1;
- return 1;
- # SIP response handling
- # -- equivalent of reply_route{}
- def ksr_reply_route(self, msg):
- KSR.info("===== response - from kamailio python script\n");
- return 1;
- # -- {end defining kamailio class}
- # global helper function for debugging purposes
- def dumpObj(obj):
- for attr in dir(obj):
- # KSR.info("obj.%s = %s\n" % (attr, getattr(obj, attr)));
- Logger.LM_INFO("obj.%s = %s\n" % (attr, getattr(obj, attr)));
|